Accelerate time to Thailand Personal Data Protection Act (PDPA) compliance

The law applies to data controllers and processors who operate in Thailand. It also covers anyone outside of the country that sells, offer services, or monitors the behavior of Thai residents. 

The PDPA requires companies to respect the rights of data subjects and fulfill rights requests. These rights are like those found in the GDPR and include the right to be informed, access to their information, the right to opt-out, and data portability. Companies must limit their data collection to their original lawful purpose, ensure the data is accurate and complete, obtain verifiable consent with the data subject before cross-border data transfer, and notify individuals of data breaches within 72 hours if their personal data was exposed. They must also employ a representative in Thailand if they monitor individuals in the country. 

OneTrust streamlines your compliance with automated data discovery and record keeping, pre-built workflows and templates, and privacy impact assessments (PIAs). You can even leverage a knowledge base built by privacy and legal experts to stay updated with the latest regulatory changes and accelerate your trust transformation journey.